Blog - Findings

Accessibility Statement

Insightful Blogs on Cyber Security, Compliance, and ESG

The “Plain English” Guide to ISO 42001

June 7, 2026

Beyond Shadow IT: The Dangerous Rise of Shadow AI Agents

June 3, 2026

May 2026 Data Breach Round Up

June 1, 2026

How to Evaluate Vendor Security: A GRC Guide | Findings

May 25, 2026

What Is Fourth-Party Risk? The VRM Blind Spot | Findings

May 18, 2026

Why Annual Vendor Reviews Aren’t Enough | Findings

May 15, 2026

Vendor Risk Assessment Checklist: What to Ask | Findings

May 12, 2026

April 2026 Data Breach Round Up

May 5, 2026

How to Build a Vendor Risk Management Program | Findings

April 30, 2026

SBOM and Software Supply Chain Risk: What Vendors Need to Provide

April 22, 2026

NIS2 Is Here: What Third Party Risk Teams Need to be Asking Vendors in 2026

April 22, 2026

Findings vs. SecurityScorecard: Beyond the Grade

April 18, 2026

Findings vs. UpGuard: Two Different Models for Vendor Risk

April 15, 2026

Findings vs. Vanta: Which Is Right for Your Vendor Risk Program?

April 7, 2026

March 2026 Data Breach Round Up

April 1, 2026

CMMC Vendor Compliance: What Defense Contractors Need to Manage in Their Supply Chain

March 18, 2026

Findings vs. Secureframe: Vendor Risk Management vs. Compliance Automation

March 16, 2026

Why Your Vendors’ AI Is Your Problem

March 15, 2026

Findings vs. BitSight: Vendor Risk Management vs. Security Ratings

March 12, 2026

Findings vs. Descartes Denied Party Screening: One Check vs. Complete Vendor Risk

March 4, 2026

February 2026 Security Breach Round Up

March 1, 2026

Beyond the Spreadsheet: Why It Is Time to Modernize Vendor Risk Management for an Ever Changing World

February 23, 2026

January 2026 Data Breach Round Up

February 7, 2026

Findings vs. Recorded Future: TPRM vs. Threat Intelligence

February 1, 2026